Portal Home > Knowledgebase > Articles Database > CSF/LFD *User Processing*/*Suspicious Process* User:rpc


CSF/LFD *User Processing*/*Suspicious Process* User:rpc




Posted by cerrie, 07-13-2013, 08:09 AM
Hi All, Is it safe to ignore rpcbind? I ask as I am seeing lots of this in my lfd logs. -- Jul 13 10:04:44 web lfd[19074]: *User Processing* PID:1280 Kill:0 User:rpc Time:10874 EXE:/sbin/rpcbind CMD:rpcbind Jul 13 11:04:49 web lfd[22399]: *Suspicious Process* PID:1280 PPID:1280 User:rpc Uptime:14479 secs EXE:/sbin/rpcbind CMD:rpcbind --

Posted by madaboutlinux, 07-13-2013, 09:48 AM
By default it isn't a malicious process but its worth checking it once before terminating the process or adding it to a pignore list in CSF.

Posted by BestServerSupport, 07-14-2013, 12:33 PM
It is not a malicious process. You can ignore this one.

Posted by Kailash12, 07-15-2013, 03:02 AM
You should not worry about "/sbin/rpcbind" process as far as this file is infected.

Posted by cerrie, 07-15-2013, 05:18 AM
OK, Thanks for updates Will add to pignore.



Was this answer helpful?

Add to Favourites Add to Favourites    Print this Article Print this Article

Also Read
UK vs USA (Views: 712)
server 30 semoweb (Views: 773)


Language: